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AGGREGATING FILTERS 



BACKGROUND 



This invention relates to aggregating filters installed 
in devices on a network. 

Network devices, such as routers, direct packet traffic 
to its intended destination on the network. Network 
users/applications install IP (Internet Protocol) traffic 
filters on" such devices to manage resources, such as 
bandwidth, on the devices. Network devices typically allow 
only a limited number of filters to be installed per device. 
As a result, the number of users/applications who can reserve 
resources on a device is also limited. 



In general, in one aspect, the invention is directed to 
providing access to a resource on a network. The invention 
features installing instructions on the network. The 
instructions may be computer-executable instructions or non- 
executable data that make up a filter which defines a fixed 
level of access to the resource. The instructions are then 
modified to change the level of access to the resource. 
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This aspect may include one or more of the following 
features. The instructions comprise a filter and are 
installed on a device on the network. The filter is defined 
by matching criteria to identify a network address and an 
5 action that is performed with respect to the network address. 
The instructions define the level of access to the 
resource based on an address of a node on the network. 
Modifying the instructions involves changing the address upon 
which the instructions base the level of access to the 

10 resource. Modifying the instructions involves substituting a 
range of addresses for the address upon which the instructions 
base the level of access to the resource. A negative filter 
is installed within the range of addresses in order to block 
an address within the range from accessing the resource. 

15 The instructions are installed in a device on the network 

and the resource includes bandwidth available from the device. 
The instructions are modified by changing the amount of 
bandwidth available on the device to one or more network 
nodes. The instructions define the level of access to the 

20 resource based on a priority level of data packets being 
transmitted through the network. The instructions are 
modified by changing the amount of data packets having a 
particular priority level that can be transmitted through the 
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network. The priority level of the data packets is defined by 
instructions in headers of the data packets. 

There are a limited number of filters that can be 
installed on the network and a filter is modified to increase 
5 a number of users with access through the filter. A negative 
filter is installed within the range of addresses in order to 
identify an address that is transmitting data. 

Other features and advantages of the invention will 
become apparent from the following description, including the 
rl 10 claims and drawings, 
fjt 

W DESCRIPTION OF THE DRAWINGS 

Fig. 1 is a block diagram of a network, which includes a 
~ network resource manager according to one embodiment of the 

fg invention. 

Hi 15 Fig. 2 is a block diagram showing software architecture 

Ej of the network resource manager. 

Fig. 3 is a flowchart showing a process for allocating 
network resources using the network resource manager. 

Figs. 4 to 9 are block diagrams showing data flow among 
20 components of the network resource manager. 
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Fig. 10 is a flowchart showing a process for modifying 
(aggregating) filters installed on network devices by the 
network resource manager. 

Fig. 11 is a flowchart showing a process for determining 
an amount by which resources on the network can be 
oversubscribed . 

Fig. 12 is a flowchart showing a process performed in the 
network resource manager for authenticating a requestor of 
network resources and for authorizing a resource reservation. 

Fig. 13 is a flowchart showing a process performed in the 
network resource manager for determining if there are 
sufficient network resources to accommodate the service 
reservation . 

DETAILED DESCRIPTION 

Devices on a network may reserve network resources, such 
as bandwidth, on routers, switches, and the like, to 
accommodate packet traffic originating from those devices. 
The apparatus and methods described herein are employed to 
effect such reservations given inherent limitations of the 
network and availability of the resources. 

Referring to Fig. 1, a network 10 is shown. Network 10 
is a differentiated services network, such as the Internet, 
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although a non-differentiated services network also may be 
used. A differentiated services network is a network in which 
different types of data packets are given different levels of 
priority for transmission through the network. For example, 
electronic commerce packet traffic or real-time packet 
traffic, such as streaming video, may be given higher priority 
than other types of packet traffic. 

Network 10 includes network resource manager 11. Network 
resource manager 11 manages packet traffic over network 10 in 
accordance with specified rules, or "policies," to manage 
quality of service (QOS) on the network. In one embodiment, 
network resource manager 11 is a computer program running on 
one or more devices, such as a network server. Alternatively, 
network resource manager 11 may be implemented using 
programmable logic, such as an FPGA (Field Programmable Gate 
Array) or an ASIC (Application-Specific Integrated Circuit) 
embedded in a network device. 

In operation, network resource manager 11 receives a 
"service reservation" from a service agent 12 running in one 
or more network devices 14. Network devices 14 may be 
individual personal computers (PCs) or other computing 
devices. Each device may run a separate copy of service agent 
12 or service agent 12 may be run on several devices. The 
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service reservation may be made through direct communication 
with the resource manager or indirectly by signaling through 
the network using an appropriate protocol, such as RSVP 
(Resource Reservation Protocol) . In the case of indirect 
5 signaling, device 30 (of Fig. 1) receives the service 

reservation and outsources admission control to the resource 
manager using a protocol, such as COPS/RSVP (Common Open 
Policy Service - Resource Reservation Protocol) . 

The service reservation includes a request for a 

10 particular network service, such as bandwidth. For example, 
in one embodiment, the service reservation contains the 
following data: a network service type, token bucket 
parameters (e.g., sustained packet rate, peak packet rate, and 
bucket size), a service agent/user identifier (e.g., the 

15 service agent's network address, and encrypted user 

credential, or the like) , a source identifier, such as an IP 
(Internet Protocol) address corresponding to the source of a 
packet transfer, and -a destination identifier such the IP 
address corresponding to the destination of the packet 

20 transfer. The invention is not limited in this regard 

however, and the network service reservation may contain an 
additional or more limited amount of data depending upon the 
functionality and features available on the network resource 
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manager. Optionally, the service reservation may also contain 
data specifying the time/duration during which resources for 
the service reservation are to be allocated; an authentication 
key for use in encrypting/decrypting the service reservation; 
5 a priority; and any other type of information that may be 

useful to the network resource manager in implementing network 
service reservations . 

The service reservation is based on the size of the 
packet, the rate of transmission, and the. class of service 

10 (CoS) of the packets being transferred. CoS defines the level 
of priority a packet is to be given during transmission 
through network 10. The CoS of a packet may be specified by 
marking the packet's header or otherwise modifying the 
packet's header so that the header becomes indicative of the 

15 relative priority of the packet. In this manner, higher 

priority packets may be given a higher priority during data 
transmission than lower priority packets. 

Referring to Fig. 2, upon receiving a service 
reservation, network resource manager 11 consults policies 

20 stored in policy repository 15 to determine if the service 

reservation should be granted or denied. Policy repository 15 
is a memory or other storage device on network 10 that stores 
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data for managing, accessing, and manipulating policies to 
provide specific network services. 

Policy repository 15 includes a directory having data 
that defines policies for network 10. For example, the data 
5 may include network user data, network group data (meaning 

those users contained in predefined groups of network users), 
network service data, service reservations associated with 
pre-conf igured data packet flows, authentication data, and 
service provisions. A service provision is a set of rules 

10 that govern who on network 10 can request a service (called 
"authorization") and the maximum amount of network services 
available to a requestor or for a particular CoS (called 
"allowance") . A service provision includes data defining the 
user or group of users requesting service and, possibly, one 

15 or more of: a list of authorized services for the user or 

group and an association of a maximum number of instances of 
the service. Additional classes of data may also be included, 
and the invention is not limited to using this particular data 
or to a system configured to use only the listed data. In one 

20 embodiment; the directory in the policy repository is an LDAP- 
accessible directory, although other directories may be used. 

A network administrator, or any other authorized user, 
may define the policies in policy repository 15. There are no 
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limitations on the policies that may be defined, save for 
those inherent in the configuration of network 10. For 
example, policies may define available network services, 
service reservations for a specified time period, service 
5 reservations that are always active, service provisions that 
authorize reservations based on the identity of a user, and a 
maximum amount of services available to the user. Thus, for 
example, a network administrator can define policies 
indicating the time of day that an application, a user, or a 

10 group of users can access network resources (e.g., bandwidth) 
and/or the level of service (e.g., the amount of bandwidth) 
that can be accessed by that application, user, or group of 
users. Data is entered into policy repository 15 via policy 
user interface 16. Policy user interface 16 may be accessed 

15 via a network administrator's computer, which could be a 
stand-alone computer or one or more computers. 

Network resource manager 11 communicates with policy 
repository 15 to access policies and other data using a 
suitable protocol. In one embodiment, communication takes 

20 place via LDAP (Lightweight Directory Access Protocol) . 

Network resource manager 11 registers with policy repository 
15 in order to retrieve policies and receive notification of 
policy changes. 
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Resource manager 11, more specifically allowance 
validator 21, communicates with authentication server 18 to 
determine whether the service agent/user is a valid entity and 
is allowed to make service reservations. In one embodiment, 
5 authentication server 18 is a Kerberos server. 

As shown in Fig. 2, network resource manager 11 also 
includes mechanism adapter 19, scheduler 20, resource 
validator 22, network topology monitor 24, network resource 
manager repository 25, and engine 26. It is noted that other 
10 embodiments of the invention may combine and/or omit one or 
more of these elements, depending upon the functionality 
desired. In any case, the network resource manager is not 
limited to this particular software/hardware architecture. 

15 I . Allocating Network Resources 

Referring to Figs. 3 and 4, a process 17 that executes in 
engine 26 for allocating resources on a network is shown. 
Engine 26 is the control center of network resource manager 
11. Engine 26 accepts service reservations, extends existing 

20 reservations, and deactivates reservations. Engine 26 
interacts with service agent 12 to receive service 
reservations from applications running on network devices; 
with mechanism adapter 19 to receive implicit service 
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reservations from devices that signal their requests through 
the network using protocols such as RSVP; and with allowance 
validator 21 to authenticate service reservation requestors 
and to authorize service reservations. Allowance validator 21 
5 interacts with policy repository 15 to retrieve policies that 
control the allocation of network services. Engine 26 also 
interacts with resource validator 22 to validate service 
reservations based on the availability of network resources; 
with scheduler 20 to queue service reservations for future 
10 activation; and with mechanism adapter 19 to monitor network 
devices and to install service reservations on network 
devices. 

As shown in Fig. 4, service agent 12, policy repository 
15, and/or network devices 14 may cause engine 26 to produce 

15 or to extend service reservations. Referring to Fig. 3, 

engine 26 receives (40) service reservations and passes these 
requested service reservations to allowance validator 21 and 
resource validator 22, both of which validate (42) the 
requested service reservations. In particular, allowance 

20 validator 21 authenticates (44) the requestor, validates the 
reservation against applicable allowances (46) , and informs 
engine 26 of the results. If allowance validator 21 
determines that a reservation is valid, engine 26 passes the 
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reservation to resource validator 22. Resource validator 22 
validates (48) the reservation against available network 
resources. That is, resource validator 22 determines if there 
are sufficient network resources to accommodate the 
5 reservation. Resource validator 22 informs engine 26 of the 
results of its analysis. 

Reservations that have passed validation by both 
allowance validator 21 and resource validator 22 are passed to 
mechanism adapter 19. Mechanism adapter 19 communicates with 

10 policy enforcement points (PEPs) , such as network devices, 
applications, etc. that are necessary to allocate (50) 
resources to satisfy the requested service reservation. Valid 
"future" service reservations are forwarded to scheduler 20. 
In this regard, a service reservation can be requested 

15 for current or future activation. If the service reservation 
is requested for future activation, engine 26 passes the 
reservation to scheduler 20, which schedules the reservation 
for future activation. At the time the reservation becomes 
due, scheduler 20 notifies engine 26 which, in turn, passes 

20 the reservation to mechanism adapter 19 for processing, as 
described below. 

Referring to Fig. 5, engine 26 also receives reservation 
cancellations from service agent 12, network devices 14, 
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and/or policy repository 15. In response to these 
cancellations, engine 26 notifies allowance validator 21 and 
resource validator 22 which, in turn, cancel any ongoing 
processes relating to a cancelled reservation. Engine 26 
5 instructs mechanism adapter 19 to remove the cancelled 

reservation from the appropriate network PEPs and instructs 
scheduler 20 to deactivate the cancelled reservation if the 
cancelled reservation is a future reservation. 

As noted, scheduler 20 receives and maintains data 

10 relating to future service reservations, as well as the end 

and lease times for current reservations. As shown in Fig. 6, 
once a future service reservation has been validated by 
allowance validator 21 and resource validator 22,- engine 26 
passes the reservation to scheduler 20 (Fig. 6A) . Scheduler 

15 20 receives the reservation and, when the reservation becomes 
due, scheduler 20 informs engine 26 and any other necessary 
components of network resource manager 11 (Fig. 6B) . When a 
reservation expires, scheduler 20 informs engine 26 that the 
reservation should be deactivated (Fig. 6C) . If a future 

20 reservation is deactivated, or an active reservation is 
terminated, engine 26 informs scheduler 20 (Fig. 6D) . 
Scheduler 20 removes any events associated with such a 
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reservation from the queue of scheduled events in network . 
resource manager repository 25 (Fig. 7B) . 

Network resource manager repository 25 (Fig. 2) is 
accessible to each of the components of network resource 
5 manager 11, either directly or indirectly, through engine 26. 
Repository 25 may also store currently-allocated allowances 
and resources, currently-active service reservations, future 
allowance and resource allocations, future service 
reservations, auditing and accounting data, network topology 

10 maps, and provides a local cache for storing policy data 

retrieved from policy repository 15. Repository 25 may also 
store associations for currently-active service reservations, 
including the service configured for each service reservation, 
the amount of allowances left for each CoS per user and per 

15 group, the amount of allowances allocated for each CoS per 
reservation, the amount of bandwidth allocated for each CoS 
per link on network 10 and per reservation, and the amount of 
bandwidth left for each CoS per link. Optionally, repository 
25 also maintains a log of events. For example, the log may 

20 contain instances of failure to meet a service reservation, 
changes in states of network 10, and communication failures 
between network devices. It is noted that the invention is 
not limited to storing all of the foregoing information or to 
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storing such information in repository 25. Additional 
information may be stored, or less information may be stored, 
as required. 

Referring to Figs. 7 and 12, allowance validator 21 
5 interprets policies stored in policy repository 15 to 

determine the overall validity of a service reservation based 
on allowances and the authenticity of the requestor. When a 
current or future service reservation is requested (Fig. 7A) , 
engine 26 passes the reservation to allowance validator 21. 

10 Allowance validator 21 receives (52) the reservation and 
attempts (54) to authenticate the requestor. To perform 
authentication, allowance validator 21 uses identification 
data present in the request, such as the requestor's IP 
(Internet Protocol) address or encrypted user credential, 

15 performs a query against authentication server 17, and 

compares the results against data^ from policy repository 15 
indicating whether the user identified by the identification 
data is permitted to make a reservation of network resources. 
If allowance validator 21 determines (56) that the 

20 requestor is permitted to make the reservation, allowance 
validator 21 attempts (58) to authorize the service 
reservation. To perform this authorization, allowance 
validator 21 compares the current service usage on network 10 
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with applicable user, group and service allowances. The 
current service usage on network 10 is stored in, and 
retrieved from, repository 25. For example, allowance 
validator 21 may compare the current service usage for a 
5 particular CoS with the service allowance for that CoS for the 
service reservation requestor. If allowance validator 21 
determines (60) that there are sufficient resources available 
to the requestor (i.e., that the requestor has not already 
reserved the maximum amount of resources pre-allotted to the 

10 requestor) , allowance validator 21 authorizes the service 
reservation and informs (62) engine 26 that the service 
reservation is valid. If the requestor fails authentication 
(56) or authorization (60), allowance validator 21 informs 
(64) engine 26 that the reservation is not valid. The 

15 reservation is then not made. Alternatively, the reservation 
may be queued for later authorization and validation. 

When a service reservation is terminated (Fig. 7B) , 
either at completion of the service, through user 
cancellation, or through failure to pass resource validation 

20 (see below), engine 26 informs allowance validator 21 that the 
reservation is to be removed. In response, allowance 
validator 21 updates data in the network resource manager 
repository 25 indicating what services are currently in use on 



- 16 - 



Docket No.: 1036(^M8001/BA04 93 




network 10. Optionally, when a future service reservation 
becomes due, engine 26 passes the reservation to allowance 
validator 21 for re-authentication and re-authorization. 
Alternatively, re-authentication and re-authorization may not 
5 be performed on the reservation. Rather, an authenticated and 
authorized reservation may simply be made when it becomes due. 

Referring to Figs. 8 and 13, resource validator 22 
validates current and future service reservations by comparing 
resource requirements for the requested service against 

10 available and currently-committed resources on the network. 
Engine 26 passes new service reservations to resource 
validator 22 once they have been approved by allowance 
validator 21. Resource validator 22 receives (68) the new 
service reservations and passes (70) source and destination 

15 network addresses from the service reservations to network 

topology monitor 24 (see below) . Network topology monitor 24 
obtains a path(s) for the requested service. For example, 
network topology monitor 25 may perform the Dijkstra shortest- 
path process using link data received from a link state 

20 protocol such as OSPF (Open Shortest Path First) . Network 
topology monitor 24 then provides that path to resource 
validator 22, where the path is received. The invention is 
not limited to use with OSPF. Rather, any link state protocol 
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may be used, another example of which is the IS-IS 
(Intermediate System to Intermediate System) protocol. 

To validate a service reservation, resource validator 22 
determines (72) if links along the path determined by network 
5 topology monitor 24 have sufficient available resources to 
accommodate the requested service. For example, if the 
service reservation is for bandwidth on network 10, resource 
validator 22 determines, based on current network and device 
bandwidth data, whether each link (e.g., device) along the 

^10 path on network 10 has sufficient bandwidth to accommodate the 

5[ service reservation. 

jpjj Certain links within the network topology may be 

>j validated, while other links are ignored. That is, resource 

s manager may not manage links to certain network devices, 

C0 15 depending, e.g., on the bandwidth available in those links 
Ml (which may be determined by the resource manager or stored 

M beforehand) . This is useful if some links have a relatively 

high capacity and, thus, do not need to be managed by resource 
manager 11. Whether a link needs to be managed may be 
20 determined by the network administrator. That is, if the 

packet is to be transferred over a high bandwidth path, then 
resource manager may simply allow the packet to be 
transferred, without allocating bandwidth along the path. 
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If there are sufficient available resources in each link 
(e.g., device) to accommodate the current service reservation, 
resource validator 22 responds (74) to engine 26 that the 
reservation is valid. In the case of a valid reservation, 
5 resource validator 22 also passes (76) to engine 26 a list of 
network devices that are affected by the reservation. Network 
devices that are affected include those along the path 
determined by network topology monitor 24. If there are not 
sufficient network resources available to accommodate the 

10 service reservation (72), resource validator 22 responds (78) 
to engine 26 with an indication that the service reservation 
is not valid. The reservation is then not made. 
Alternatively, another path, e.g., a path that is not the 
shortest path through the network, may be mapped, and that 

15 path tested to see if it contains sufficient network resources 
to accommodate the service reservation. In this case, the 
device supports explicit routing, such as the MPLS 
(Multiprotocol Label Switching) protocol. If so, the 
reservation may be made on that new path. 

20 In the event of a change in the topology of the network, 

network topology monitor 24 informs resource validator 22 of 
the change. Resource validator 22 uses this data to determine 
if the change affects any active service reservations on 
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network 10 (obtained from repository 25) . If an active 
service reservation is adversely affected by the change in 
network topology, resource validator 22 instructs engine 26 to 
terminate the current service and updates current resource 

5 allocation data in repository 25. Resource validator 22 may 

also determine if a change in the topology of the network will 
affect any reservations that have not yet come due and, if so, 
resource validator 22 instructs engine 26 to consider 
alternative paths through the network for the not-yet-due 

10 reservations. 

Network topology monitor 24 detects changes In the 
topology of network 10 and supports automatic discovery of 
devices on network 10. Network topology monitor 24 also 
monitors link states of the devices on network 10 and uses 

15 these link states to determine the shortest path(s) available 
between source and destination network addresses. 
Alternatively, other paths, such as the least cost path may 
also be determined. Network topology monitor 24 obtains the 
link states of devices on network 10 using a link-state 

20 protocol such as OSPF or IS-IS, and also obtains a maximum 
bandwidth per link via mechanism adapter 19. The maximum 
bandwidth per link may also be provisioned through a command- 
line interface on the resource manager or stored within the 
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policy repository. This data is mapped to links in network 10 
and is used to update the dynamic topology map of network 10 
stored in repository 25. 

Network topology monitor 24 determines a path based on 
dynamic (i.e., current) topology data that it learns from the 
network. Network topology monitor 24 is able to maintain the 
current dynamic topology since it is informed of link state 
changes by the link-state protocol it is using. The dynamic 
network topology map is updated based on those link state 
changes . 

Network topology monitor 24 may also be provisioned 
statically (i.e. network 10' s topology is described manually), 
through the resource manager's command-line interface or 
through the policy repository. The network topology stored 
within network topology monitor 24 may be a combination of 
dynamic (automatically learned) information and static 
(manual) information. Network topology monitor 24 merges the 
information learned with the information entered manually to 
come up with a consistent network topology. 

Mechanism adapter 19 issues queries for device states and 
links and provides an interface for any components of network 
resource manager 11 that require device state and link data. 
Mechanism adapter 19 also activates and deactivates service 
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reservations at network devices by configuring those devices 
to support services on network 10. Configuration is performed 
by installing IP traffic filters, flow identifiers, and/or CoS 
parameters on network device (or, more generally, PEP) on the 
5 edge of a network, the path through which is determined by 
network topology monitor 24. For example, if a service 
reservation specifies that packets from a particular network 
address having one CoS (e.g., high priority packets) are to be 
given access to bandwidth before packets from that same 
^,10 network address having another CoS (e.g., low priority 



packets), mechanism adapter 19 installs appropriate filters, 



flow identifiers, and CoS parameters on PEPs (e.g 



network 



device) on the path determined by network topology monitor 24. 



The filters are installed on PEPs on the edge of a network. 



m 15 



Mechanism adapter 19 may also implement a request/response 



protocol such as COPS/RSVP, in which case the activation and 



deactivation of service reservations is performed by 



responding to a device's request for service. This method of 



activation and deactivation may be used in parallel with the 



20 



method of activation and deactivation that installs IP traffic 



filters . 



For an active service reservation, mechanism adapter 19 



maintains the state of devices configured for the reservation. 
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Mechanism adapter 19 also handles deactivation and deletion of 
service reservations. Deactivating and deleting service 
reservations involves removing reservations artifacts for the 
designated reservations from the network devices. 
5 Mechanism adapter 19 communicates with network devices 

via one or more protocols. Examples of protocols that may be 
used to effect such communication include SNMP (Simple Network 
Management Protocol), COPS-RSVP, COPS-PR (Common Open Policy 
Service - Provisioning) , and CLI (Command Line Interface) . 

10 SNMP is a network monitoring and control protocol. COPS is a 
query response protocol used to exchange policy data between a 
network policy server and a set of clients. RSVP is a 
communication protocol that signals a router to reserve 
bandwidth for real-time transmission of data. CLI is an 

15 interface that is employed when a user is logged onto a 

network device directly. It is noted that the invention is 
not limited to use with the foregoing protocols and that all 
such protocols are not required. 

Referring to Fig. 9, when a service reservation becomes 

20 due (e.g., a current reservation has been received or the time 
for processing a future reservation has arrived) , engine 26 
instructs mechanism adapter 19 to activate the service (Fig. 
9A) . Engine 26 provides mechanism adapter 19 with the list of 
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devices affected by the reservation, which was received from 
resource validator 22. Mechanism adapter 19 communicates with 
those network devices 14 to provide the network devices with 
the filters, flow identifiers, CoS parameters, and/or any 
5 other items that are required to implement the service. If a 
protocol such as COPS/RSVP is used, mechanism adapter 19 
responds to the device with a message to install the 
reservation, if the reservation is a current reservation. If 
the reservation is a future reservation, mechanism adapter 19 

10 implements an "RSVP rendezvous", in which it waits for the 
device to make a request through COPS/RSVP before mechanism 
adapter 19 gives a positive response. Since it may be 
possible that the original future reservation did not contain 
all the data required to perform resource and allowance 

15 validation (i.e. a future reservation may specify only the 

source network address of the packet transfer and the service 
agent's credentials), when the device makes its request, 
mechanism adapter 19 may have to perform resource and/or 
allowance validation on the request. 

20 When a service reservation terminates (Fig. 9B) , engine 

26 instructs mechanism adapter 19 to deactivate the service. 
In response, mechanism adapter 19 communicates with the 
necessary network devices 14 to remove any configuration data 
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specific to the deactivated service. When the state of a 
network device changes, mechanism adapter 19 notifies 
listening components, such as network topology monitor 24, 
within network resource manager 11. If a protocol such as 
COPS/RSVP is used, mechanism adapter 19 sends an unsolicited 
message to the device to remove a reservation. 



II . Aggregating Filters On The Network 

Referring to Figs. 2, 9 and 10, network resource manager 

10 11 may install (80) filters on network devices in order to 
activate and/or deactivate service reservations on the 
devices. The filters typically perform several functions. 
For example, the filters may assign different levels of 
priority to different types of packets by marking the packet 

15 headers (e.g., adding, deleting, or changing data therein). 

The filters also police packets being transmitted through 
the network. What is meant by "police," in this context, is 
to limit the number of packets of a particular priority level 
that are transmitted through the network device. For example, 

20 a filter may limit the bandwidth available to high priority 
packets to 64 Kbps (kilobits per second) . Any high priority 
packets in excess of 64 Kbps may be dropped, re-marked or 
"shaped". Shaping refers to queuing excess packets, 
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particularly packets from "bursty" traffic, in order to 
preserve as many packets as possible while still performing 
the policing function. For example, if the bandwidth 
available for high priority packets is 64 Kbps and a filter 
5 receives 128 kilobits in a second, the excess 64 kilobits from 
the 128 kilobits may be queued and transmitted after the 
initial 64 kilobits, assuming that there is enough buffer 
space on the device. Shaping smoothes "bursty" traffic. 
A filter is defined by two attributes: a matching 

10 criteria and an action. Matching criteria such as a source 
and/or destination address, protocol number, port number, 
etc., allow the device to identify a packet and perform an 
action on it. Actions include dropping, shaping, and marking. 
Typically, network devices at the "edge," or entry point, 

15 of a network are provided with filters that perform marking, 
policing, shaping and routing functions. The edge of a 
network is determined relative to a host device that generates 
and transmits the packets. For example, in Fig. 1, network 
device 30 is at the edge of network segment 10a relative to 

20 host device 14a. 

The number of filters that can be installed on any single 
network device is typically limited. For example, 
conventional routers only allow thirty-two filters to be 
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installed. These filters are configured as one per network 
interface, resulting in a limit of thirty-two service 
reservations per interface. 

Referring to Fig. 10, in process 28, installed filters 
5 are modified (82) to increase the number of users with access 
to the network without increasing the number of filters 
installed per device. More specifically, a filter contains a 
single predetermined network address, such as an IP address, 
to which the filter applies. For instance, the filter may 

10 specify IP address 47.100.100.3. Packets transmitted from 
that address match the filter's criteria, are processed in 
accordance with the network resources allocated to that 
address by the filter, and are routed accordingly. Process 28 
changes (84) the single network address in the filter to 

15 provide more than one user with the network resources 
available through the filter. For example, a range of 
addresses, such as addresses 47.100.100.3 to 47.100.100.8 may 
be substituted for the single network address in the filter. 
This is done by mechanism adapter 19, in response to 

20 instructions by engine 26. Mechanism adapter 19 communicates 
with each network device along the route determined by network 
topology monitor 24 to modify installed filters appropriately. 
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Filters are modified to include a range of addresses when 
two network devices (or nodes) request the same service 
reservation. Engine 2 6 determines whether two nodes have 
requested the same service reservation and, if so, instructs 
5 mechanism adapter to change the address of installed filters 
to range (s) of addresses, as is appropriate under the 
circumstances. Using a single filter for two or more network 
addresses is referred to herein as "aggregating" the filter to 
accommodate multiple service reservations. 

10 Network resource manager 11 may also modify filters in 

network devices to change (86) the amount of bandwidth 
available to a particular device and/or to change an amount of 
a particular level of data that can be transmitted through the 
filter. For example, mechanism adapter 19 may communicate 

15 with a filter on network 10 to change the amount of high 

priority packets that the filter will transmit per service 
reservation . 

As part of its policing function, a filter notifies 
source network devices or the resource manager if packets from 
20 the source devices are being dropped. If a source device (or 
resource manager) determines that an inordinate or unexpected 
number of packets are being dropped, the source device (or 
resource manager) may transmit a message to the network 
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administrator and/or to network resource manager 11 indicating 
that there is a problem with the filter. For example, 
modifying the filter to operate on a range of network 
addresses may have the unintended consequence of allowing 
5 third parties to transmit packets through the filter. In the 
example given above, if the two intended parties have 
addresses of 47.100.100.3 and 47.100.100.8 that are within the 
range of addresses provided by the filter, an unintended third 
party with an address of 47.100.100.5 will also be able to 

10 transmit data packets through the filter. 

To determine if an unintended third party is transmitting 
data through the filter, mechanism adapter 19 may install 
monitoring filters on any network device (s) in question. Such 
filters determine which network addresses are transmitting 

15 data through the filter. If it is determined that an 

unintended third party is transmitting data through the 
filter, mechanism adapter 19 can install (88) a negative 
filter on the network device. A negative filter prevents a 
particular network address or range of addresses from 

20 transmitting data through an installed filter. So, for the 
example given above, mechanism adapter 19 may install a 
negative filter preventing address 47.100.100.5 from 
transmitting data through the installed filter. 
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III . Oversubscribing The Network 

Network resource manager 11 can also be used to control 
the amount of resources available to users on the network. 
Specifically, network resources may sometimes be reserved, yet 
remain unused, resulting in wasted resources. By 
oversubscribing resources, network resource manager 11 is able 
to reduce wasted resources on network 10 without significant 
adverse effects to its resource-committed clients. 

Referring to Fig. 11, a process 32 is shown by which 
network resource manager 11 can oversubscribe network 
resources, such as bandwidth, for its clients. According to 
process 32, engine 26 obtains (90) historical usage data 
relating to usage of a network resource in a network device 
over a period of time. In particular, engine 26 determines an 
average difference between an amount of the network resource 
that was reserved over the period of time and an amount of the 
network resource that was used over the period of time. 
Mathematically, this is represented as follows: 

S'n+i = [S\ + a t n+ i)/(n+l) , 
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where "S" represents the average of the difference between 
reserved resources and actual resources used, "a" represents 
the amount of resources that were reserved but not used at a 
specific time period, "t" represents the time period, and "n" 
5 represents a sample count. is the previous average, a t n +i 

is the sample for the current time period, and sVn is the new 
average . 

Engine 2 6 determines S t n+ i based on data provided by 
mechanism adapter 19 and retrieved from repository 25. That 

10 is, mechanism adapter 19 queries devices on network 10 in the 
path determined by network topology monitor 24 for the actual 
amount of bandwidth used at a specific time "t". Repository 
25 stores the count of updates and the latest average (S t n ) . 
Engine 26 obtains (92) current usage data relating to 

15 current usage of the network resource in the network device. 
In particular, engine 26 determines a difference, "a n0 wf " 
between an amount of the network resource that is reserved at 
a current time and an amount of the network resource that is 
in use at the current time. As above, mechanism adapter 19 

20 determines the amount of usage of the network resource at the 
current time and provides this data to engine 26. Engine 26 
retrieves the amount of the network resource that is reserved 
at the current time from repository 25. 
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Engine 26 determines (94) an amount by which the network 
resource can be oversubscribed based on S t n+ i and a now - 
Specifically, engine 26 applies (96) values for S t n+X and a n0 w 
to stored rules in order to select (98) the value of a risk 
parameter (k) that is used to determine the oversubscribing 
amount. The rules may be fuzzy logic rules stored, for 
example, in repository 25. 

Representative examples of fuzzy logic rules that may be 
used include: 



A. If many reserved resources are not used right 
now {a now } and usually {S^+i} there are not a lot of 
reserved resources being used at this time, then 
set the risk parameter {k} to be very high. 

B. If fewer reserved resources are not being used 
right now {a n0 w} and usually {S t n +i} there are only a 
small percentage (e.g., 5%) of reserved resources 
that are not being used at this time, then set the 
risk parameter {k} close to zero. 



The bracketed parentheticals above, namely {k}, {a now } and 
{S t n +i}, indicate where the values of k, a n0 w, and S^+i, fit into 
the above fuzzy logic rules. Thus, according to fuzzy logic 
rules "A" and "B" above, "k" is set relatively high if sVi 
indicates that usage of the reserved network resource over the 
period of time "t" is relatively low and a n0 w indicates that 
current usage of the reserved network resource is relatively 
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low. On the other hand, "k" is set relatively low (i.e., 
"close to zero") if S t n +i indicates that usage of the reserved 
network resource over "t" is relatively high and a now indicates 
that current usage of the reserved network resource is 
5 relatively high. Predetermined values may be used for the 

high and low values noted above and in the fuzzy logic rules. 
Fuzzy sets such as "low risk", "high risk", "many resources", 
and "few resources", are determined by domain experts using 
their knowledge and experience. They are scalable according 
g 10 to available resources. When values a n0 w and S t n +i are 
m presented, a fuzzy inference engine based on fuzzy rules such 

Qj as (A) and (B) is applied and a value for k is generated. 

% 4 Generally speaking, the higher "k" is set, the more the 

s network resources can be oversubscribed. 

f: 15 Engine 26 uses risk parameter "k" to determine (100) the 

£J amount (V) by which the network resource may be 

oversubscribed. "V" is determined as follows: 

V = kS fc (k > 0) , 

20 

where k and S fc are as defined above. The maximum amount of 
resources that can be reserved in a device at time period "t" 
is thus the maximum amount of resources available from the 



- 33 - 



Docket No.: 10360^p001/BA04 93 

device plus the oversubscribing value "V". Setting values of 
k too high or too low may lead to oscillations in the amount 
that the network resources may be oversubscribed. To avoid 
such oscillations, k may be limited to a range of values. 
5 The maximum amount of resources available from the device 

is determined by mechanism adapter 19 and reported to engine 
26. Engine 26 adds "V" to this value and instructs mechanism 
adapter 19 to reserve (102) the oversubscribed resources in 
the network device. 

10 The engine can use other types of rules and techniques 

for determining the historical and current usage data and for 
determining an amount of oversubscription. The 
oversubscribing process is not limited to use with the network 
resource manager of Fig. 2. Rather, the oversubscribing 

15 process can be used in conjunction with any system for 
controlling access to network resources. 

IV. Architecture 

The processes described herein are not limited to use 
20 with the particular hardware/software configuration of Figs. 1 
and 2; they may find applicability in any computing or 
processing environment. The processes shown in the flowcharts 
may be controlled by, and implemented in, computer programs 
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executing on programmable computers that each includes a 
processor, a storage medium readable by the processor 
(including volatile and non-volatile memory and/or storage 
elements) , at least one input device, and one or more output 
5 devices. Program code may be applied to data entered using an 
input device to perform the processes described above. 

Each such program may be implemented in a high level 
procedural or object-oriented programming language to 
communicate with a computer system. However, the programs can 

10 be implemented in assembly or machine language. The language 
may be a compiled or an interpreted language. 

Each computer program may be stored on a storage medium 
or device (e.g., CD-ROM, hard disk, or magnetic diskette) that 
is readable by a general or special purpose programmable 

15 ■ computer for configuring and operating the computer when the 
storage medium or device is read by the computer to perform 
the processes described above. The invention may also be 
implemented as a computer-readable storage medium, configured 
with a computer program, where, upon execution, instructions 

20 in the computer program cause the computer to operate to 
control the above processes. 

It is to be understood that while the invention has been 
described in conjunction with the detailed description 
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thereof, the foregoing description is intended to illustrate 
and not to limit the scope of the invention. Other aspects, 
advantages, and modifications are within the scope of the 
following claims. 
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